This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: TfWEqAHgsjN2McPO5KWA5zSt8O5eSJQ1mPfuTWKdAXM= Subject key identifier: E2:1A:DA:63:28:6F:1A:F3:24:CB:99:9C:9A:15:B5:3B:F2:26:BD:AE Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 070516B6E2F59B325423BD1C167954678B8B6151 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: 0123 Signing time: Sun 21 Dec 2025 02:10:42 +0000 Manifest this update: Sun 21 Dec 2025 02:05:42 +0000 Manifest next update: Wed 24 Dec 2025 10:35:42 +0000 Files and hashes: 1: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: lS5KueYMn8bh5TmvZ4yUXAkTqzodamQRrumfFCdScxY=) 2: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: O3gcBChIby3AdjPp6ABgzZyB6Dva+5HT0HMij4bC+80=) 3: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: jXxQ64IynNf9UaROvNwdTvfTlkwJClGyFCLy03gvgpE=) 4: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: PCHSq6PPM7Eex4iGf0qx5wmZlieNr9FqDO5n4LV+Zok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:05:16:b6:e2:f5:9b:32:54:23:bd:1c:16:79:54:67:8b:8b:61:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Dec 21 02:05:42 2025 GMT Not After : Dec 24 10:35:42 2025 GMT Subject: CN=E21ADA63286F1AF324CB999C9A15B53BF226BDAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2c:5b:25:30:87:4b:36:2d:ef:1d:9d:99:9c: d6:0b:c9:ed:db:4e:f9:a0:e9:8c:d4:4f:76:98:31: f4:8c:f7:87:90:7a:1c:14:59:b8:69:d8:92:d0:26: 2f:e8:1f:30:59:9e:0a:53:04:a8:68:6e:b6:f5:ce: e7:5e:1e:bb:b3:32:2b:89:6e:a3:2a:9f:3f:b9:7e: 73:c6:d4:a9:6a:b2:cf:95:a3:66:ff:90:3f:7f:8e: 26:c2:a2:6c:d2:4d:16:ad:f9:e7:09:c3:18:ab:62: ad:fe:ea:6d:58:70:97:a3:fd:ae:c3:1b:b3:81:81: f2:11:d8:cb:54:1b:e4:36:bd:d6:fe:92:8f:f7:aa: 23:9b:e0:63:cc:15:0f:bc:92:7e:42:dc:7e:de:5f: 4c:46:1a:47:d9:ee:bd:d5:4b:6c:f6:f2:3e:70:8f: 29:ff:13:55:92:57:39:f7:6d:9f:fe:18:c5:b5:1e: c7:89:e2:84:d1:94:53:84:70:f0:bc:1b:25:78:c3: 30:2e:99:08:cf:f8:45:d5:a8:01:9b:ef:d6:59:66: b8:3b:ad:03:5f:ca:dd:1e:95:c6:4a:7a:97:97:97: ef:e5:e7:a4:6d:6c:f2:dc:d6:31:be:d0:fe:a3:a0: 0a:fc:78:07:7c:77:cb:10:f7:7f:98:d9:0f:40:d5: df:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1A:DA:63:28:6F:1A:F3:24:CB:99:9C:9A:15:B5:3B:F2:26:BD:AE X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:fc:88:20:c2:00:01:11:28:21:13:50:e7:6c:fd:0d:92:b7: 13:47:ee:91:40:3f:86:8e:40:cd:4f:a3:ba:fb:d4:fc:49:b7: 6e:a1:a2:43:fe:67:ed:0d:c3:ac:0b:7b:21:57:4c:c9:ac:61: d8:51:01:31:b7:8e:7f:49:b6:d0:42:a7:e4:6f:43:9f:c2:5f: bb:eb:93:11:e9:b9:8c:f1:b5:7e:d9:69:52:24:7f:0c:b3:45: f4:54:2a:b6:d5:5c:e9:1a:25:0a:d6:74:67:ab:b8:e8:1e:5b: 8c:aa:d8:33:a3:3c:33:fc:f9:1f:ae:09:cb:70:81:72:59:ab: 89:51:97:fb:9d:a6:3b:c2:0e:df:28:d5:17:3a:cf:bd:b0:5f: 1e:3b:4e:c0:4b:7a:75:98:de:7c:a6:d4:02:e6:36:be:47:ef: 92:bd:3c:50:08:19:66:a5:b0:cc:ee:ce:61:59:1d:a0:91:ad: d7:50:dd:d5:59:d1:e5:70:3d:62:a4:f4:62:76:e7:25:e3:6b: 03:fa:65:af:18:2e:de:e7:ec:2d:c8:7d:f4:e9:35:9c:54:ba: b8:38:53:b4:93:c9:40:d7:4f:2d:5d:99:39:11:0f:ba:d6:d2: a5:34:0a:15:e8:f4:24:53:a2:a1:32:7a:e7:75:22:48:96:dd: a0:5a:4d:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwUWtuL1mzJUI70cFnlUZ4uLYVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNTEyMjEwMjA1NDJaFw0yNTEyMjQxMDM1NDJaMDMxMTAvBgNV BAMTKEUyMUFEQTYzMjg2RjFBRjMyNENCOTk5QzlBMTVCNTNCRjIyNkJEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLFslMIdLNi3vHZ2ZnNYLye3b Tvmg6YzUT3aYMfSM94eQehwUWbhp2JLQJi/oHzBZngpTBKhobrb1zudeHruzMiuJ bqMqnz+5fnPG1Klqss+Vo2b/kD9/jibComzSTRat+ecJwxirYq3+6m1YcJej/a7D G7OBgfIR2MtUG+Q2vdb+ko/3qiOb4GPMFQ+8kn5C3H7eX0xGGkfZ7r3VS2z28j5w jyn/E1WSVzn3bZ/+GMW1HseJ4oTRlFOEcPC8GyV4wzAumQjP+EXVqAGb79ZZZrg7 rQNfyt0elcZKepeXl+/l56RtbPLc1jG+0P6joAr8eAd8d8sQ93+Y2Q9A1d8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4hraYyhvGvMky5mcmhW1O/Imva4wHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABj8iCDCAAERKCETUOds/Q2StxNH7pFAP4aO QM1Po7r71PxJt26hokP+Z+0Nw6wLeyFXTMmsYdhRATG3jn9JttBCp+RvQ5/CX7vr kxHpuYzxtX7ZaVIkfwyzRfRUKrbVXOkaJQrWdGeruOgeW4yq2DOjPDP8+R+uCctw gXJZq4lRl/udpjvCDt8o1Rc6z72wXx47TsBLenWY3nym1ALmNr5H75K9PFAIGWal sMzuzmFZHaCRrddQ3dVZ0eVwPWKk9GJ25yXjawP6Za8YLt7n7C3IffTpNZxUurg4 U7STyUDXTy1dmTkRD7rW0qU0ChXo9CRToqEyeud1IkiW3aBaTdc= -----END CERTIFICATE-----Generated at Sun Dec 21 12:14:46 2025 by rpki-client